The IPND is an industry-wide database that contains information related to all listed and unlisted public telephone numbers in Australia, regardless of the service provider. The IPND came into operation on 1 July 1998 and is maintained by Telstra under the
Carrier Licence Conditions (Telstra Corporation Limited) Declaration 1997.
The information held in relation to each public telephone number includes:
The IPND also includes information about whether a public telephone number is to be listed or unlisted in telephone directories. Unlisted numbers are flagged and not provided to public number directory producers.
The Telecommunications Act 1997 and the Privacy Act 1988 that create the legal obligations for a CSP to protect personal information.
The Telco Act requires carriers, nominated carriage service providers and number database operators to protect the confidentiality of information they hold about communications, carriage services and customers. In certain circumstances information about communications can be disclosed. Examples of the circumstances in which this can occur include:
The Telco Act makes it an offence for CSPs to disclose or use IPND information for purposes that do not fit with the exceptions (such as the above examples) provided for under the legislation.
The Telco Act was amended in December 2006 to:
Further information on the amendments are on the page Telecommunications Amendment (Integrated Public Number Database) Act 2006.
The Office of the Federal Privacy Commission (OFPC) monitors the arrangements relating to disclosure of information under the Privacy Act.
Amendments to the Privacy Act, which came into effect on 21 December 2001, extended the operation of the Privacy Act to include regulating the handling of personal information by private sector organisations, and to provide the community with additional protection on privacy issues. The legislation also established ten national privacy principles (NPPs), which apply to all corporations. The NPPs provide a framework against which the corporation must make judgements about how best to interact with individuals and protect their privacy. NPP2 sets out the general rule that an organisation must only use or disclose personal information for the primary purpose it was collected. The use of that information for a secondary purpose is not allowed except for a number of limited circumstances. Examples of these circumstances include:
The access and use of the IPND by industry is governed by a Communications Alliance Code of Practice. That Code (C555:2008 Integrated Public Number Database Data Provider, Data User and IPND Manager) deals with the accuracy, storage and disclosure of information held in the IPND. The Code was first published in January 2003 and registered with the Australian Communications and Media Authority (ACMA). It was revised in 2008.
Data users (CSPs and public number directory producers) must register with the IPND Manager to gain access to the IPND data. In accordance with the Act, the IPND can only be used for specific purposes:
Law enforcement agencies and emergency service organisations may also access IPND information.
The Telco Act provides for civil penalties for breaches of an industry Code (including the Communications Alliance Code C555:2008).
Further information on communication and privacy issues can be found on the OFPC website at
www.privacy.gov.au.